Windows 2012 AD security group.

Which Windows 2012 Active Directory security group would give a domain user and a workstation joined to the domain a "Windows 7 Enterprise" Internet activations rights?

We want to allow certain technicians to activate newly joined workstations to the domain.

So which AD security group would allow us to do that?

Thanks.